EKA Privacy Policy
How we protect your inner life, honor data minimization, and uphold compliance with India’s Digital Personal Data Protection (DPDP) Act, 2023 & DPDP Rules, 2025.
1. The EKA Privacy Principle: Sanctuary for the Inner Life
EKA is designed as a structured knowledge system and contemplative sanctuary. We believe your spiritual, philosophical, and personal reflections deserve the highest ethical stewardship.
Separation of Data
Your identity/account credentials are strictly isolated from your spiritual preferences and private journal entries.
No Mandatory Sensitive Profiling
We never make religion, caste, lineage, or spiritual affiliation mandatory to explore EKA or create an account.
2. Data Fiduciary & Business Identity
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), the Data Fiduciary responsible for determining the purposes and means of processing personal data is:
Entity Name: EKA Knowledge Systems Private Limited (or designated Operating Entity)
Address: Bengaluru, Karnataka, India
Support & Privacy Desk: privacy@eka.earth
Grievance Officer: Grievance Redressal Desk (grievance@eka.earth · During beta preview: inquiries can also be submitted directly via in-app settings or support)
3. Categories of Data Collected
We practice strict data minimization. We collect only what is strictly necessary to deliver each distinct feature:
- Basic Account Data: Email address, encrypted authentication identifiers (via Google OAuth or secure email magic links), username, and display name.
- Voluntary Cultural Context: Optional traditions, practices, or learning themes you select to customize your study feed. You may reset or erase these at any time.
- Member Contributions: Posts, comments, reflections, citations, and questions you choose to publish publicly in Circles or feeds.
- Private Practice Logs: Private journal entries, sadhana tracker check-ins, and fasting observances, stored with strict user-level access controls.
- Technical & Session Metadata: Device screen resolution, operating system, and essential session security cookies to protect against account takeover.
4. Purpose of Collection & Legal Basis
We process personal data based on explicit, informed affirmative consent and legitimate operational requirements:
| Purpose | Data Used | Legal Basis (DPDP) |
|---|---|---|
| Account Access & Authentication | Email, auth token, username | Contractual necessity & Consent |
| Feed Customization & Sacred Calendar | Voluntary traditions, saved themes | Explicit Affirmative Consent |
| Content Verification & Trust Audits | Published citations, contributor ID | Legitimate Interest / Public Trust |
| Community Safety & Anti-Harassment | Report logs, moderator actions | Legal obligation & Platform safety |
5. AI Privacy Boundary & Training Policy
EKA utilizes AI for linguistic translation, knowledge graph contextualization, and wisdom indexing. We enforce strict boundaries:
- No Private Data in Training: Your private journal entries, confidential messages, and unshared drafts are NEVER sent to third-party model providers for training.
- Zero PII in Prompts: Semantic queries are sanitized to strip personal identifiers before being processed by retrieval engines.
- Auditability: AI-generated summaries are transparently marked as synthetic and subject to source provenance validation.
6. Children’s Personal Data Protection
In accordance with Section 9 of the DPDP Act, 2023, EKA does not knowingly process personal data of individuals under the age of 18 without verifiable consent from their parent or lawful guardian. We do not engage in targeted behavioral advertising or tracking directed at children.
7. Your Rights under the DPDP Act
As a Data Principal, you have statutory rights that can be exercised directly from your profile settings or by contacting our Grievance Desk:
Right to Access
Request a machine-readable summary of all personal data held about you.
Right to Correction & Erasure
Correct inaccurate data or request complete deletion of your account and private records.
Right to Withdraw Consent
Revoke optional personalization or notification permissions with the same ease as granting them.
Right of Grievance Redressal
Escalate unresolved concerns to our Grievance Officer and subsequently the Data Protection Board of India.
8. Non-Medical & Non-Guaranteed Spiritual Outcomes Disclaimer
EKA is an educational, cultural, and spiritual exploration platform. The practices, discussions, meditations, and traditional rituals shared on EKA do NOT constitute professional medical, psychiatric, financial, or legal advice. EKA and its creators make no guarantees regarding physical healing, financial prosperity, or divine intervention.
8.1 Data Retention Schedule
We retain personal data strictly as long as necessary to provide platform services, maintain trust and provenance, and satisfy statutory tax and compliance obligations:
| Data Category | Retention Window & Policy |
|---|---|
| Active Account & Profile | Retained while account remains active and in good standing. |
| Account Deletion Request | Soft-deleted for 14 days, permanently hard-deleted within 30 days. Backups roll off within 35 days. |
| Private Reflections & Journals | 100% user-controlled. Deleted immediately on request; never used for analytics or AI training. |
| Published Knowledge & Traditions | Attribution may be anonymised on deletion; canonical citations and provenance remain in the knowledge graph. |
| Financial Ledger & Invoices | 8 years in compliance with applicable Indian tax and financial accounting regulations. |
| Auth & Security Logs | 12 months for threat detection and audit validation. |
| Analytics & Behavioral Telemetry | 14 months raw; pseudonymised after 90 days; subject to explicit consent choices. |
| Moderation & Enforcement Records | 24 months to maintain safety and address repeat violations. |
| Platform Audit Log | Append-only for 3 years; actor identities pseudonymised upon account deletion. |
9. Grievance Redressal Mechanism
If you have any questions or complaints regarding the processing of your personal data, please contact:
Grievance Officer: Compliance & Data Protection Officer
Email: grievance@eka.earth
Response Timeline: Acknowledgement within 48 hours; resolution within 30 days as prescribed by law.